> # ⛔ REVOKED — 2026-08-10
>
> **This go-ahead is revoked and must not be executed.** It authorises the P1-1b Scope 1–8 bulk
> import of the FDR document corpus. Decision **V6-D3** (`docs/V6.md` §2, 2026-08-10) cancels that
> import: no document data is imported into Sibyla. Documents enter one at a time through the
> defined channels as day-to-day work.
>
> Only **Layer 2** (Entity Item Classification) and **Layer 4** (Auxiliary Calculation) reference
> data is imported, plus the DOCTYP/DOCEFL rule catalogues as configuration. That work is
> `S1` in `docs/project-todo-v6.md`, not Scope 1, and it uses a plain idempotent seeder — no
> import-provenance machinery, no pinned-blob roster, no row-count acceptance criteria.
>
> Withdrawn together with this document: the five data-quality baselines (119 / 119 / 52 / 221 /
> 2,787), the 55.9% reconciliation baseline, and the grandfathering machinery, all of which exist
> only to serve the imported history.
>
> Retained as historical record. **Do not follow any instruction below this line.**

# AGENT-PROMPT-v5-P1-1b — Scope 1 pin confirmation: amendment 4's re-pin checkpoint decided by path (a)

**Date:** 2026-08-07
**Follows:** `docs/AGENT-PROMPT-v5-P1-1b-o10-amendment-4.md` ("Scope 1 re-pin checkpoint"),
`docs/AGENT-PROMPT-v5-P1-1b-piece-d-goahead.md` (ordered execution 4),
`docs/p1-1b-o10-independent-review.md` ("Piece D attempt #2 integration review — Accept"),
`docs/p1-1b-status.md`, `docs/PROJECT-STATE.md`
**Authority:** Miguel.
**Gate satisfied:** amendment 4's **Scope 1 re-pin checkpoint** — the confirm-pin-or-re-pin
decision that amendment 4 placed *after* Piece D's Accept and *before* any Scope 1 restart.

## Precondition — the checkpoint was reachable

Piece D attempt #2 candidate `a4d40aac429584baed3481d62c2f859dd4ad2860` received its separately
authorized fresh independent integration-focused review in an exclusively-review session, with
verdict **Accept — 0 Critical, 0 High, 0 Medium, 1 Low (D-A2-L1)**, recorded in
`docs/p1-1b-o10-independent-review.md` and published at
`744424df167af52b9680d0f46bfca50225422138`. **All four pieces — A, B, C, D — are accepted.**
Amendment 4 makes that Accept the trigger for this checkpoint and for nothing else automatically:
the choice between path (a) and path (b) was explicitly **not** pre-decided by amendment 4.

## The decision — recorded verbatim

Miguel's decision, in his own words, reproduced exactly as given:

> Confirmo o pin b91768513fc638381fbde91f0b576b08220a98f6 como snapshot de importação
> histórica. Caminho (a) do amendment 4. A evolução pós-pin do protótipo é tratada como
> importações governadas posteriores sob as decisões já fechadas D4–D9.

## What this decides, in amendment 4's own terms

- **Path (a) is taken.** `b91768513fc638381fbde91f0b576b08220a98f6` is confirmed as the
  historical-import snapshot. The pin is unchanged and remains the single content-addressed
  source for every governed P1-1b and Scope 1 read.
- **Path (b) was not taken.** No **O11-class re-pin** to the then-current tip was made, is
  authorized, or exists. Consequently none of path (b)'s mandatory preconditions is triggered:
  no roster/blob/surface re-verification at a new pin, no re-measurement of the five baselines,
  no C8 (43/43/0/0) or C13 re-measurement, no DOCTYP manifest re-check, and no re-check of
  `EF0000053` or any other authored code against a changed `permanent_code_ledger.json`. Those
  obligations attach to path (b) only. Path (b) is **not chosen, and not available without a new
  governed Miguel decision**: an O11-class re-pin requires exactly such a decision, never an
  inference from this record. Declining path (b) here **closes no decision and creates none** — it
  neither converts path (b) into a closed decision nor opens one.
- **Post-pin prototype evolution is handled as later governed imports** under the
  already-closed additive-period-imports decisions **D4–D9**, exactly as amendment 4's path (a)
  provides. The eventual cutover delta is acknowledged as inevitable under either path, because
  the prototype keeps operating until Sibyla replaces it.
- **Nothing is reopened.** O8-D1/D2, O9-P, O9-D1…D5, O10-D1/D2, and D4–D9 remain closed and
  govern unchanged. The five completeness baselines remain **119 / 119 / 52 / 221 / 2,787** and
  the two `Routine` rows still import verbatim. No baseline number, decision, manifest, or
  accepted object is altered by this confirmation. Rejected `b324a3e…`, `57f0f023…`, `7ea6c0f…`,
  `6f86023d…`, `b8fa033…`, and `bf5926e…` remain neutralized evidence only.
- **The non-adoption rule stands unchanged.** No file content, count, code, mapping, or value
  from any commit after the pin may inform any Sibyla artifact. This confirmation adopts none.

## This session's amendment-4 preflight — run fresh, read-only, for this checkpoint

Run in **this** session immediately before this record was written, against the read-only
prototype clone `D:/fileStorage/repos/invoice-skill-build` after `git fetch`. This is **not**
adoption of another session's preflight result; finding **D-A2-L1**'s binding disposition
(each session runs its own preflight; adoption is inadmissible as execution evidence) is
honoured here rather than merely acknowledged.

| # | Amendment-4 check | Result |
|---|---|---|
| 1 | Pin `b91768513fc638381fbde91f0b576b08220a98f6` resolves in the local clone and in the fetched remote | **Pass** |
| 2 | No history rewrite — the pin is an ancestor of live `origin/main` `3dd4150caef7e3a1d2a77c5fa34361d2aefe4c54` | **Pass** |
| 3 | Local clone anchored — local `HEAD` equals the pin and the working tree is clean | **Pass** |
| 4 | Roster integrity at the pin — effective governed roster measured **cell by cell**: **49/49, 0 mismatches, 0 resolve failures**, with the O8 `entbnk` substitution blob `70d418f6023bff68f0d642b4aff26c1ead1298be` | **Pass** |
| 5 | Surface integrity at the pin — direct pinned `Editor/Data` surface: **48/48 direct blobs, exactly one `Backups` tree, 0 missing, 0 extra** | **Pass** |
| 6 | Divergence recorded as a finding, not a stop — metadata only, as logged below | **Recorded** |

**Check 6 — divergence log, metadata only.** Live prototype tip
`3dd4150caef7e3a1d2a77c5fa34361d2aefe4c54`. Post-pin commits, hash and subject only:

| Commit | Subject |
|---|---|
| `1e841a4f9a88cd6a5e90e6632dff54185be9949e` | Complete Stage 10 Round 8 reconciliation and mapping updates |
| `3dd4150caef7e3a1d2a77c5fa34361d2aefe4c54` | Apply Stage 10 Round 8 revenue review updates |

**No post-pin content was read or adopted** — not a file, not a count, not a value. The two
commits are opaque and are logged here solely as the divergence metadata that check 6 requires.

**This preflight is the records checkpoint preflight, not Scope 1's execution preflight.** It
discharges the amendment-4 checks required to decide and record this checkpoint. It does **not**
discharge, pre-run, or substitute for the fresh preflight that Scope 1's own execution/go-ahead
will require, which the session performing Scope 1 must run itself.

## Scope 1 — readiness, stated precisely

**Scope 1 is ready to seek its own go-ahead.** The confirm-pin-or-re-pin checkpoint that stood
between Piece D's Accept and Scope 1 is now satisfied by path (a); no other amendment-4
precondition to seeking that go-ahead remains outstanding.

**Scope 1 has not started, and this record does not start it.** Specifically, none of the
following has occurred or is authorized by this document:

- Scope 1's own execution preflight — it has **not** been run.
- A Scope 1 go-ahead — none exists; this confirmation is not one.
- Any importer execution or import of any kind.
- Any shared or live database write.
- Any prototype write of any kind; the prototype remains read-only for every agent under this
  prompt family.
- Any O5 work (O5 remains the project's other open item), any baseline change, any change to a
  closed decision, or any project-evolution-page work.
- Item 5's real-population proof, which remains deferred to Scope 1.

## What this confirmation does not authorize

Any prototype write. Reading or adopting post-pin prototype content. Re-pinning, now or by
implication. Reopening O8, O9-P, O9-D1…D5, O10-D1/D2, or D4–D9. Changing any baseline number.
Resurrecting or cherry-picking any rejected commit or candidate, in whole or in part. Any
shared/live database write before the complete disposable rehearsal passes and a verified fresh
backup exists. Production go-live. History rewrite in either repository. Starting Scope 1
without its own go-ahead and its own fresh preflight.

## Records scope of this pass

This is a records-only pass. Its exact changed-path set is three files:
`docs/AGENT-PROMPT-v5-P1-1b-scope1-pin-confirmation.md` (this document),
`docs/p1-1b-status.md`, and `docs/PROJECT-STATE.md`. No test, build, container, database, or
importer ran; **no post-pin prototype content was read, inspected, or adopted** — checks 4–5 used
only the authorized pin-anchored roster/surface measurement at
`b91768513fc638381fbde91f0b576b08220a98f6`, and check 6 used post-pin commit metadata only. No
code, migration, DDL, script, or accepted object changed.

## Merge authority — granted, not yet exercised

Miguel authorizes **a further, normal merge of `feature/p1-1b` into `main`**, permitted only
**after this exact three-path pin-confirmation commit is committed and pushed**. It is an
**ordinary merge commit only** — **no rebase, squash, amend, reset, or force push**, in either
repository.

**Provenance of this authorization.** It was given in the **same governed Miguel instruction that
ordered this records-and-merge session** — not inferred from any prior record and not a standing
authority carried over from an earlier one. It is recorded here **in substance**, and is
deliberately **not presented as a verbatim quotation**; no wording above this line is offered as
Miguel's exact words. The only verbatim quotation in this document is the pin decision reproduced
under "The decision — recorded verbatim", which stands separately and exactly as given and is
unaffected by this section.

**This is a *further* merge, not the earlier one.** It is **not** `f1488ac`, the earlier
`feature/p1-1b`→`main` merge that has **already been performed**; `f1488ac` is past history and is
not the authorization being exercised here. The authorization recorded in this section is for a new,
not-yet-performed merge commit.

That further merge is **not performed by this records pass**. It changes no pin, no baseline, no closed
decision, and no accepted object. It does **not** start Scope 1, and it is **not** Scope 1's
go-ahead nor any part of Scope 1's execution preflight.

**On SHAs — bounded to this pass.** *This* records pass states no merge SHA for one reason only:
the merge has not occurred yet, so no such SHA exists. This is not a standing prohibition on
naming it. The later session that performs the merge **will record its actual SHA** in the
records.